- Merged all secrets from vault.yml.text into vault.yml
- Includes: openclaw_alice (http_nodes, ssh_nodes, cowbay_provider, infra), gitea
- Encrypted with ansible-vault
- vault.yml was age-encrypted but scripts use ansible-vault commands
- Converted to ansible-vault format so vault.sh and get-secret.sh work
- Added encryption format change log to docs/secret-vault.md
- Verified: vault.sh view and get-secret.sh both working